
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130362e302f32332d3233203d3e203137363231.roa
File: 35392e38312e3130362e302f32332d3233203d3e203137363231.roa (raw, json)
Hash identifier: /9y4Iy9TTlqJuaJtGp2OC+Xcc+BIsss7c1pAAQwdJgw=
Subject key identifier: C0:2A:DD:29:74:E8:1E:7B:57:39:CB:3E:81:BD:BC:23:D2:7C:EF:14
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 56C7CBFC40A976A77B972C98BC1A0872EFFA3F5C
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130362e302f32332d3233203d3e203137363231.roa
Signing time: Wed 10 Jun 2026 11:45:57 +0000
ROA not before: Wed 10 Jun 2026 11:40:57 +0000
ROA not after: Wed 09 Jun 2027 11:45:57 +0000
asID: 17621
IP address blocks: 59.81.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:c7:cb:fc:40:a9:76:a7:7b:97:2c:98:bc:1a:08:72:ef:fa:3f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: Jun 10 11:40:57 2026 GMT
Not After : Jun 9 11:45:57 2027 GMT
Subject: CN=C02ADD2974E81E7B5739CB3E81BDBC23D27CEF14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:d7:a8:9b:f8:0d:e7:62:1d:4f:51:1b:16:
16:63:a5:0c:bd:e5:c6:c7:1b:91:bb:9e:d7:0a:9e:
83:b1:58:0c:34:4a:43:01:c4:30:be:a9:5b:c6:e5:
a1:2c:cc:17:66:a1:c7:89:61:2f:a8:00:cf:52:b4:
19:fa:51:dd:19:98:a8:f7:8a:80:69:76:38:38:f1:
d7:51:6d:6b:23:d4:d1:a4:6f:e3:bc:0d:36:51:85:
a4:51:0e:c9:87:74:77:3c:8b:a2:c9:8e:b4:a5:18:
e1:53:b7:e9:4a:8c:44:d1:91:cf:83:be:93:88:ce:
83:d3:5f:89:52:ff:6a:33:71:5f:e9:f4:d8:7d:e1:
0a:08:34:0e:ef:4d:82:4e:d5:2b:0f:48:8b:f5:b1:
0e:0f:90:2a:a0:67:d4:d2:14:81:99:7c:87:33:77:
7c:38:f9:e5:a7:4f:a1:84:fe:46:88:9f:8a:11:9d:
53:f4:fc:bb:ad:60:9d:b6:82:44:8d:5a:c0:33:e6:
ec:da:4a:82:8d:d4:ff:37:9b:b6:fd:a6:3a:b8:bc:
38:e9:91:10:18:11:2a:be:93:ed:d6:71:76:c8:42:
a5:ec:94:ea:d2:42:21:5f:8d:f7:a4:82:b6:3a:28:
00:8e:5f:ee:0f:c0:2c:e6:f8:c6:73:6f:d9:f7:7c:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:DD:29:74:E8:1E:7B:57:39:CB:3E:81:BD:BC:23:D2:7C:EF:14
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130362e302f32332d3233203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
59.81.106.0/23
Signature Algorithm: sha256WithRSAEncryption
24:0d:01:e4:c0:63:2a:d2:11:1e:62:b0:66:45:67:4b:ed:74:
53:82:aa:f7:11:4c:b3:c5:df:3c:5f:29:94:d3:55:01:91:9d:
d1:8e:b0:21:a1:ac:f5:71:26:1a:e6:f0:78:a2:ee:77:6a:83:
e7:5c:03:1d:80:bd:e8:b7:7e:db:3c:40:f6:38:20:66:47:4a:
92:5b:fa:ea:57:1c:85:1a:22:68:c0:49:6d:02:38:ee:29:bd:
01:c8:d5:c0:29:d1:16:da:a8:40:be:56:fd:65:e7:5f:38:08:
cf:ca:8f:48:e6:5a:18:78:b4:64:70:18:bd:18:2e:4d:f5:66:
12:28:fd:77:5a:fa:47:cb:a2:66:73:09:58:05:01:3b:5b:0c:
38:1a:82:cb:b8:a6:3e:8c:4a:15:34:b9:8f:8e:82:a0:05:fc:
1a:f7:6e:2b:09:ac:de:a4:09:d0:59:3d:50:a1:92:85:87:dc:
70:55:a8:d2:5f:cd:26:42:47:e9:2e:6e:89:42:36:88:eb:01:
2f:3c:54:fa:fc:7a:65:2b:39:b0:06:59:d9:75:ec:2f:2d:9a:
a4:4d:e9:e5:75:cd:80:f5:2c:5a:c0:a3:70:99:d1:22:bb:ab:
f9:61:67:fc:68:d2:40:5d:36:2c:98:e8:fd:e6:f9:c8:cb:04:
3f:e1:81:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:09 2026 by rpki-client